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<^1^ 7h v 4€ D o v (Virtual Private Network: VPN) ^ 7><^7>7}- 7>a^ 7># 
A 4"M 3^*1 SLtf-i- ^H«fl oj-ssl- 7-1 *1 5L^- 5}^ <^1^ 7}^-a>^^ 

° 0 Vl ?H ^ ^-^-5.^1, A 1S ^IJlofl rc)-5} Dead#7lKS100)°ll >M UP 3 

^ Establish^7jl(S200)* ^rW^I, S200<Hl^^ ^S. 91^^, a^tfl ^ «M^r, dHEi 
^-8-^ LCP ojs^^l^, LC p ^^<H1 4^ ^ ^SL^}J1 c-fl 

o]e^| <y-Ji5l-7> ^A*>4^ ^"fl ^ Authenticated 7^1 (S300)# ^^^r^l, S300 

^l^i PAP/CHAP^. 5. <y^-8r *r*8*H, <?1^ 0 1 oil °1 ^*3*r 

Encryption #31 (S350)# ^r}jB.S.*| , ^-§-7} ^^^r <$3l$- 

S. 5 

QS.^, VPN, IPSec, L2TP, PPP 
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7\^t *\ A d*&2) wj-^ {Method for encrypting data of access VPN} 



£ l^r H^Sl L2TP(Layer 2 Tunneling Protocol )# °l-g-tr VPN(Virtual 
Private Network)^ °11 ^*!: 1-^5., 

5L 2^ A>-§-^ 7 > L2TP* °]-g-*fl ^A>^ A^nj-ofl ^SRf q-^-xfl^ «5L, 

£ 3£- H*}^ PPP(Point-to-Point Protocol) ^^Hl 3rtb 
.£ 4^ l^oll PPP sfl^l 31 o] Ei ^^ofl 

-£ 5^ ^ «r^^ ^*HH1 tcfe}- <y-J:S)- ^-^7]- S.^Q PPP -g-^H 



10 : a>-§-7> ^-^-71 20 : PSTW 

30 : ISPC^iwl^ ^^r^*}) 40 : D oK IP n <r) 

50 : LNS(A>^^>) 
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<io> M. <^]i 7h^ D J-( Virtual Private Network: °) 'VPN'&r ^O^l 7}<y*}7} 
A>^ 7># A}*^ ^^A] c-flojEi ^*fl C-flolE-1 oj-^gj. cl-Tfl -i- T^JE^ Sfe 

7K v ^>^ n cJ-^ ^M^r. 

^V^sl o. o^joi^c}. til-g-^^H 1- ^ ^-fj-^TlM- ojtfl^ 

cfe ^ wl-g-o] ^ tiling ^*1# ^^Rr ^ 

o.i=. nflo. °- 3£CLg_ *Vtf. o]<2]- £o] 7 1 9] ZL «3^H 

tr Wl-g-^l iASlHS 7>><g§l -f-Altil-g-oll cflgfl^ ^ ^ojcf. 



<12> ^.A]A>^^ o]E^ 7l<^Sl Jl^ofl ^ 7>^1 A}<>]-g- -f-A] *j| 



<5><*j &<L^, "7K1-A>4inj-.. o] ^ J1 A^l^ 7 fl^ ^*fl#t}-. 7}^}^ ^ ti] ^ 

7r°d*r 7>A]ol ^§-f-A]t£ ^oflAi i£E ? |o]^0 S n 0 Kg. ^^§>J1 ^ o. 7 ] nfl^-oj] 

-f-^J- £3*H #5^^ *fl^°l ^Jl&O.^ ^-f-Aj^-g- ol-g-^o^ n].*l 7 }<£]7} Jl^-Sl A> 

A>-g-^ ^AjnJ-oj^ Xj^^o] s^ofl #7fl£ol -^<^tr 

3# 7Hi 7l^^oflA^ Sfltg- aj.| ^ -g^o) <>|b}-§-o] o}cf. o] E-] 
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<H3-g-* n^\JL a>^^o] ^ 7l^« ^-f-g-^<M; **IM ^l^-«fl^ a^1^ 7 > 
VPN >Hwl^ol4. 

<13> oje^V VPN ^rltSLsL <?M <^^\ ^of| *| Sfl 7^ -§-2] ^ 

<14> 7}<$#2] ^H^, ^iB5}^! f-^ ^ AH ^-f^Kg; Af-g-^ VilS^H ^. 

#U *r ^^-^ , 7l<a ilit *r VPN^ tfl^Nf ^JlS. iL<?lt}. 

<15> nelJl, VPN-cr ^Ei^^lM- 1-11 B^H A^til^ A>^7]-S] ^-^^ *}A}^ WAN A> 

sfe^-ji *fl5l ^IM-^l^l ^e^* °l-g-s>c*| 7l<^^ ^ <g<3«-^l 3^ «l-8-^- 

<ie> ^^1- iSPdnternet service provider)#£ ^^sHl 

-g-^, LAN-to-LAN a^I^ ^ ^ApJ-T} eJHl o]37l^l 

*fl^ ^ Stl^r JE^JI ZLS^uf, ol5]tr 71^ A^l^ 

QoSCQuality of Service)^ iL^]^ 7}^^ -g-*fl-I- ^S«>ZL &cj-. 

<i?> ofl if tfl<*s. ^-tisq- 7l^ifl ^iiLs* -^30.5. VPN *\ b] ^7} ^ 

«1 ^^Ji ^<H^r. 
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<is> VPN *>3ji oi-o^ cf#4 ^-cf. 

<20> o]*> t ^flo} VPN 7l#^r a} 5] 7 }*1 trj-B}- ^-ff-sH ^^MS. tr^-. 

<22> - Access VPN : £^ r 2f €3*1^1 ^7>^ A>-g-^>^>^ v-fle^a 

<23> Client-to-LAN y o v ^-ir *}■%- 

<24> - Intranet VPN : *Mr#^l vflHflH 

<25> LAN-to-LAN «<H^ *f-g- 

<26> - Extranet VPN : ^}S-\- a>^s|-e u -] ^ h^o] tilH^H 

<27> iL^^oj cf= u|lB^H#^: ^ < ?1^ > i°J: 

<28> nelJl, VPN 7l^# ^wJ-^H nq-Br ^-fr-^ cf-g-^ ^4. 

<29> - Client-to-LAN : 7l^J4 41 3*1 se^ o]^ e^-^ 

<3o> 3L x$ f ISDN> xDSL 34* ^-a] A]~g- 

<3i> <&z$ POPofl ^iSl- VPN 71^ oj-g. 

<32> _ LAN-to-LAN : 4<#tr ^Efla) VPN ^*fl 

<33> jr^e ^E^l VPN <M 

<34> VPN t)Q 
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<35> O}^. A>-g-S]^ ^Afli VPN^r ^3. ^-^^o] A}-g-7}7> S-^M^ xDSL^g- -f-Sfl 

L2TP(Layer 2 Tunneling Protocol), PPTPCPoint to point Tunneling Protocol) PPP 3^ 

^ ^-S-^^ *fA>o} ^Hi n <Hl ^£Hr Client-to-LAN ^ VPN# ^r«r^. 

<36> L2TP^ PPTP^r L2F# HSSfS^ , IFTF RFC2661^1 9X^. L2TP^ s.^ 

£ 23]^ PPP Sfl^ 2}^ ^#5r^H, *rM"^ E^tN ppp 

<37> ol§> f L2TP1- <^M}^ VPN^ ^-g- ^-^lS. 

<38> s. L2TP(Layer 2 Tunneling Protocol)!- ©1-g-tr ^^1^ VPN(Virtual 

Private Network)^ ^ -Ir^SolJl, £ 2^ A}-g-*}7> L2TP1- t^o] a>^^] 

<39> £ 1 ^ £ 21- ^S*>^, <34^ VPN 7><y^>7> A}-g-*> ^^71(10)1- °]-§-* r o} *}*>3 

A >^ n o v (LNS: L2TP Network Server HI ^^71 ^*fl, PSTN(Public Switched Telephone 
Network) D oH20)# ^-*fl ISP(30H PPP 3^rir tr4(Tl). ISP(30)^ ^4^o) o) = ^ ^ 
91 27fl^ 51iH^:(peer-to-peer)^ A}-g-7} <y#^<y CHAP/PAP(Chal lenge Handshake 
Authentication Protocol /Password Authentication Protocol)!- °l-§-tr *}-&*} "illr 2 !-^^: >| 
=m-(T2). 

<40> ISP(30)tt A>-g-7> ^^HH _OJL ^S]^, A>^-7fsq- A}^.|. o^fl^l <^fl 

L2TP b^^- ^tWT3). 
<4i> L2TP B]^o] ?§^s\T£ f A]~g-*> ^7l(10)s}- LNS(50)*H1 4*1 ^ ^1^^-^* ^*3tr 

^(T4), PPP NCP(Network Control Protocol) ^#-g- *l*fW(T5). 
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<42> $#2\o.g. NCP ol^- 0 !^^, 7.]~g-*} ^^71(10)5+ LNS(50)^] PPP ^ 

£H(T6), c-flojEi ^a]o1 olijLo^Tfl ^cf(T7). 

<43> 3711, A]~g-;4 ^-^71(10)^ ISP(30)^1 ^3. Sj-EH^I* J2«-*>^ 

LCPCLink Control Protocol Til (Tl)^-, <4-g-7> #7ll(T2, T4)^, ^j-g-^l- ^-^71(10)^ 

LNS(50)?H1 #3 ^bH^I* ^^rRr NCP #7fl (T5,T6)^- ^l^r. 

<44> ols:> ; ^-71 PPP ^*1<H -g^S^MS. tb^f. 

<45> £ 3^- ^tiV^o] ppp(Point-to-Point Protocol) -g-^Hl ^tb Jlf-^ojcf. 

<46> A>-g-^> ^ a] 5. Al^ofl rcfe]- Dead^TjKSlOHH UP^H Establ ish^Tfl (S20)» ^* r . 

711 S2<H>Hfe ^ <?]^«J-^, ^rfl ^ aj-olJL^, c-Ho]Ei ^§-ofl ^-*V LCP 

Aj-o] ol^o^l^, LCP ^ ^ofl ^ oi^o} ^ Authent i cate^7lHS30)l- ^ 

IM. S30<>1H o]^ol ^2fl*>^, ^^ol #)^s]ol Terminate #3l(S50)* ^r^*>7fl ^nf. 

<47> S30<HH °}^o) 01^0^7^ LCp ^ S ^ofl^ Aj-^O]^ *i^S r *l ^ 

^-f , Network #7}1(S40)1- 31 °H 3 *^ 3}iL(IP ^ ^ , DNS A i &\ 

<48> oj^^-ol, VPN^I 7,>-g-£l^ E^£ff2l ^ PPP1- ol^-^j- A}^} o]^h 0 V^o> 

LAN-to-LAN^^l VPN ^<H1 7.>-g-£)^ SS.S#<?1 IPSec( Internet Protocol Security 
protocol)^ ^-f ,<*M 7>^1 *fl4=) ^r^r <y-s3}- ^-JiEl^ ^l^^H $2. il 

^ ^ZL $lcf. 
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<49> nfefA^ <^M}^ VPNofl^i A>-g-s)ji PPP &^ ^ <£jie]^ofl ^ oj e^ <y-jLit)-l- ^S. 

3] 2ix)7} ^.^^cf. 



<so> M. ^. 7l ^ ^ €fl^^7l 3}*fl *r#^ 3}-°^, ^Afli VPN « 0 V 

LCP ^ ^ofl tflolEi 2^ ^ *J-^ ^7>^S.^1, <^M1^ VPN 7}^*> 

7> CflojEil- 4^T*!^ ^ ^-SL^T ^ «o^* ^l^^fedl ^3°! ^Cf. 



<51> S.^^- ^*}7l ^- H-rgojl n}^ O^-fl^ 7K> A>^n o >^ C^] o] E-) 

°J#^ , cflolEi ^ 5*^ ^ *}°}^ 3.7} , ^3. #Bfl £^El^, CflojEi 

<y-jLs}- ^c^jfofl ^j-*V ^a. ^Bl- ^S£#(LCP:Link Control Protocol) °l-?-<H*l 
H&tJ); ^1 l#7fl^ LCP 2i&<*\] ^ ^^.*>cfJl 
^ ^l~8-*r ^M^OD)^ sfli^^-C password)!- ^lH^Kr 2#7fl ; *1] 1 #31^ LCP ^ 

# S^ofl 3He] ^2^1 ^r*3*Kr <#i=Hl tg^o] o]^o]z\ ^ o. ; c^oIe] <£J: 

Sri- =r^Hr ^] 3#3l; ^1 1^)2] LCP ^ tcfej- A)~g-xj- o]^ ^ tilo^ <g-;£3*-S- 

*r*9Sr*l ^ 3 H^cM ^l^^^l^^, HH^i ^, A>-g-7>>2}- A}- 

3^r* ^*fl 31 °M 3 W ^iL(IP ^± DNS^tt] ^ ^ ^)* ^ 

NCPCNetwork Control Protocol) ol-f-cH*!^ 4^7}] : ^ ^f^r^r ^^^r 0 !! 
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NCP 1H V °1 ^3^, ^>-§-^ ^H^^Hl *])#o] ?§^S\o] cflolEil- ^Al^ ^1 5#7flig- 

<52> ^-7] *fi l^Tfls} LCP ^^1, ^]c]b\ <y-2s} ^<5H ig^oj 

*}7] $m D lSl A}-g-7}<2)- Af^nj-o^ LCP ^a o > ^ EflojM. ^-ofl r-llolEi <#jL5Kencryption) ^ 

<53> o]^, ^o] ^H}^ £.o)6fl ^\iX>7> ^-g- -g-ol^Tl) ^Al^- ^ 

<54> £ ^ofl rr)-s. L2TP(Layer 2 Tunneling Protocol)* °l-§-tr VPN(Virtual 

Private Network)^ #eJ3Sl "cHp-^^r ^Bfl^ %-<£fs\E.S. =L *8^}7}3, tb4. 

<55> ppp ^ <£51Z]^$) LCP ^fe^HH c-11 oj b] QSL^M: t *r 

^ %>s.ol ^ 7 >^ PPP LCP -g-^ i*M-M: o>5fl a 2^1 ^lAl*Vcq-. 

<56> +X\ t 7 ]^d\) ppp LCP ^o V 3M"&£ 3. m- £1*. 

<57> [JE. 1] 
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>^0 
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13. 2] 
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3.E. 


^4 
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Reserved 




1 


Max i mum-Rece i ve-Un i t 




3 


Authent icat ion-Protocol 




4 


Qual i ty-Protocol 




5 


Magic-Number 




7 


Pr o t oco 1 -F i e 1 d-Compr e s s i on 




8 


Addr ess-and-Cont ro 1 -F i e 1 d-Compr ess i on 




9 


Encrypt ion 





<59> 



<60> 



<61> 



<62> 



<63> 



<64> 



<65> 



=r^3*Rr ^r^M ^7>S]<H PPP ol^^Tfl ^rf. 

°H ^#^r *V^«io11 ^ 7fl Ji^*] ^ ojo.^ ^ M ^-f 

£ 4^r ^ofl ^-g-S]^ PPP sfl^l cflolEl ^^ofl H^ojcf. 
£ 4« ^S^H PPP sfl^ ^ ^B^, Configure-Request Packet (^^.=1)^ 

LCP ^ ^l-ol ^ (peer) 1:^1 711 ^^Trdl , o] ^#^Sr 'type', 

'Length' , 'Data' 

y\ s^-s ppp ^3-* ^a.7is. tbcf. 

.£ 5^ ^- yj-^-^t!: ^HH 14s. ^] 7 \ 5 ^ ppp ^*hi ^ 

£ 5^ A>-g-^V 3^ a] 5. Al^ofl oj-ej. Dead^TlKSlOO)^^ UP^H Establish 

^T^1(S200)# ^r^^Ml £4. S200<^1^^ #3: °Jf^ , ^ *r4J «r°lB^, dH^ <£.^o_ 
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•t- ?rtr LCP ^ A o Vo l ol-f-^H, LCP ^ STi^l 14^ ^-2. <?i^°l cflolEi 

<y-Jl5|-7> ^^.s>4ji ^ Authenticated^! (S300)l- t^W. S300^1^ 

PAP/CHAP ^ , ^^-^^-S. #M-^ dl o] <#J:sH^ ^t^^ 

Encryption <£7fl (S350)l- ^r*SW. 
<66> Encryption ^31 (S350)^r 3*W ^ 7}^ -id^r 

^ Sj^cfl, ^tiV^o.^ A>-g-^ZL DESCdata encryption standard)* *}■%■?:} 

<67> 6]f>\ t o}^ §71 ^sfl DES^l W<*| ii^^S 

<68> DES^ o>efl !4 ^-tq-. 

<69> [^*vxi !] text(^§-)+Key(3fl^^)+encryption ^Jisl^= <y-jL2|-fl 
<70> o]nfl -a-s^-l- 5Kkey)&£- A>-g-^V nfl^jEL-fr o]-g.*>4. 

<7i> <*) 7 H encryption <£jis^-& -f^ ^Jl^Mz] ^H*!-!- 64H]B 1-^-^-5. £7fliL, key 

^ 56«1M1- JL^37lS. *V4. ^-g-olH M-^^^l 64«lJ=^ ^ 7fltifl^*>Jl, 

(mixing)^*}. 

<72> ^H^, yj-igofl o^fl A]-g-7> d^lUO)^^ A>^T, o V(50)^ofl ^.J17r^ HH^TT 

<y-^Sl-7> £ ^-EflS. ^^1^171 Ufl^j, ^JSjLofl ^^Ol ^O^] ^Cf. 

<73> ojufl oj-j-^. S-^Aj- A>-g-^ Ol^o. ^^j.s.ols.S z\}o}&\ <y-Jl2)-* ^^Hr ^ ^- A}-g- 
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<75> S350^r^l# cflolEi <£Jl2|-7} -*NH*1 Network #3l(S400)» 

11}°}°] 3 ^tr ^il(IP ^ tf^, DNS^ *\ ^ ^#tr ^, dH^-I- 

<76> o$7]*\, +<t3L <$1^a1 pap^ ^-f , two-way handshaking « 0 V ^^-S. A 1 °J^^ -Miafe J: 

iSl^l ^f-§-^V °r°l ^ (ID) ^ sfl^^^# ^a} ^^S. ^df^S ^^i^ 

^ ic#ol ^Tfl o] =-^^1 j7 o|c]-. 4^ <£s.$-7} ^A^r ^-f three-way handshaking 
y <^^ CHAP# 4^*}^ ^r-g-^r tr^f. 

<77> CHAP H o V ^ o|^ a ^o|]a^ Iae £ *fl^] Ailf iL^M, Jl^Btt J£<Jr-§- ^*fl *fl3 

<78> o]A o V .g. rg*$o) W>^*V ^Al^ofl tfl*fl 7l^£]5^m, ^*Kr 7l#^ 

^i-a- ^°l^f . ^^.^ ^*H1*^ 7l^ 3H^J- ^ Si* 
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°K V «>^- ^ = ^ PPP SS.£#(L2TP, PPTP ^-)^ ol-g- 

711 ojnfl LCP q# U"=-<*l) <&3L$- ^^o^«. -QSL^r ^7>a] 7lH.S^ ppp S. 

§ ^ ^E^afl ^^4^4 DflolEi -y-Jis}- j^-g- *r &3E^- 
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[^T 1 * 1] 

HH^i <3^-f-, ^-g- ^ 5*^ ^tfl dlojEi 3.7], *g=L #Efl S^E-}^, r-flo] 
Ei <£jL5i|- ^o^Jfofl W ^3. HS£#(LCP:Link Control Protocol) ^#<>1 

*fl 1^31 ; 

*ll l^l^ LCP ^ M°ll nj-e} #SL 91^°} ^&.*}^JL o]^6]%) % 

■f , °>°l^(ID)sq- iflifls. (password)* *flH.*Hr *fl 2#7fl ; 

4 1 #31^ LCP 35*H ^ dlojEi <£3_s±m ^*Rr °1 
#:slSH& ^*g*Hr afl 3#7fl; 

*fl 31 °H 3 -f-y# W 3 SLOP f"^-, DNS^tH ^ ^ -§-)# ^#SRr NCP(Network 

Control Protocol) °l-¥-<H*lfe- *)1 4^31: ^ 

A>.g-^ AHd^^l NCP ^ejs]^, AV^-^><4 a>^^H1 W&o] oflol 

3* ^rHi^Rr ^ 5#7)lS ol^^l^ ^ ^ 7 ^v A}^^ oj- 

2] 
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ciHEi <y-j:3|- ^^1- 5£^-*H ^>1^^£^- ^7} #n Die) A>-g-^sf ahi 

^ LCP ^ -S-^d ^Hl t-flojE^ <y-Ji5K encrypt ion) ^ flfe 



3] 

PAPCPassword Authentication Protocol)* °l-g-*>^ ^-g; ^-^^.S. ^-fli 7H V ^l^.^ 

4] 

^fl^^r* °l-§-*H *ll ^Kr CHAPCChallenge Handshake Authentication 

Protocol)* ol-g-sr>^ f^O^ ^ ^A-fl^ 7}^- nV<^ efl o] E^ <$5.3[ ^ . 



[3^8" 5] 

DES(Data Encryption Standard)* °l-§-^ ^ ^^^-S. <^1^ 7K> 
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6] 

*ll 1* *fl 5*M &<>M, #7l *l) 3#3HH o^o^l^ cflolE] oJ-Jls}- ^^M, <y- 

iij-* W ^(key)^ a>-§-^> sfl^JELl- o]£-is}±r ^ ^SLS. *}*= <$M)^ A^nv 
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[S 4] 
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